diff options
| author | Jeff Chang <chengjeff@google.com> | 2021-12-13 17:50:50 +0800 |
|---|---|---|
| committer | Jeff Chang <chengjeff@google.com> | 2021-12-13 17:52:18 +0800 |
| commit | 58a3327f22da7215cc3964f51a9ae6b490ae990e (patch) | |
| tree | 40f71b46f1481a4be4ae02417bdbe470d2cd6b33 /core/java/android/inputmethodservice/InputMethodService.java | |
| parent | 97ada9bc8407b7fd5f8b6f7b80640e301575be70 (diff) | |
Only allow system and same app to apply relinquishTaskIdentity
Any malicious application could hijack tasks by
android:relinquishTaskIdentity. This vulnerability can perform UI
spoofing or spy on user’s activities.
This CL limit the usage which only allow system and same app to apply
relinquishTaskIdentity.
Bug: 185810717
Test: atest IntentTests
atest testActivityWithRelinquishTaskIdentity
atest com.android.server.wm.TaskTests
Change-Id: I55fe8938cd9a0dd7c0268e1cfec89d4e95eee049
Diffstat (limited to 'core/java/android/inputmethodservice/InputMethodService.java')
0 files changed, 0 insertions, 0 deletions